
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier: QYmvAVXdp+KGpM+MXDfs99YESYxo53VyT8HMj0vQGy0=
Subject key identifier: 2A:C9:7F:0D:85:24:F8:02:44:56:E0:2D:A0:5F:EE:14:C2:C1:79:6F
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number: 01D9
Signing time: Sun 01 Mar 2026 04:26:07 +0000
Manifest this update: Sun 01 Mar 2026 04:26:07 +0000
Manifest next update: Sun 08 Mar 2026 04:26:07 +0000
Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: 9scE15mXPmWBWk9yQv7NkA3cT2opw9Iw1toZfHxP0B0=)
2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: G0w0TQdZeUrlcSkeMZASVFwkhbdyy5+tF+86mftNAhQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Validity
Not Before: Mar 1 04:26:07 2026 GMT
Not After : Mar 8 04:26:07 2026 GMT
Subject: CN=69a3bfdf-43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:cf:62:94:2a:a3:ec:b5:f8:17:1a:df:d4:
12:5b:a3:ef:74:2a:8f:e2:3d:89:8d:de:2a:b3:26:
a2:d6:26:87:72:fe:e7:db:33:05:86:4b:1e:23:65:
12:c7:ef:f1:83:63:d3:12:2f:e2:84:66:a3:9c:62:
fd:c8:07:cf:34:fc:dd:f4:e5:93:0d:f5:f1:17:8c:
b8:0d:d0:51:c3:4b:75:ae:a4:63:63:e5:ac:63:47:
b4:cc:7b:89:1b:ac:f8:31:a1:3d:4c:26:c8:9b:48:
fe:1f:ed:08:85:3f:49:25:07:08:e5:d8:79:ef:7e:
12:02:65:23:b1:61:69:87:5c:e9:2d:69:60:bf:61:
c2:93:f5:30:a6:b6:9a:09:8c:0f:a2:bd:87:21:06:
b3:9d:fc:ff:b5:75:ae:55:6f:39:e4:e9:09:fa:07:
b3:d3:c3:42:51:74:29:24:ae:5e:09:86:c1:fc:fd:
03:19:7a:81:37:4f:d8:de:b3:05:ae:e5:a1:a1:7e:
e2:6c:64:b9:e4:39:3c:93:f6:c0:00:70:fe:25:08:
67:36:ea:85:da:4c:04:35:8c:58:e0:f1:57:42:29:
07:00:a0:de:65:a0:0e:99:9c:f4:d9:47:0a:56:95:
24:f1:f3:85:d1:b2:0f:f8:3c:32:94:8a:6f:81:4e:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:7F:0D:85:24:F8:02:44:56:E0:2D:A0:5F:EE:14:C2:C1:79:6F
X509v3 Authority Key Identifier:
keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:16:21:35:a4:ec:5b:cc:b8:6b:e3:f8:d2:de:a7:3d:0c:
8f:b9:be:03:f7:50:de:e9:71:99:46:15:49:b8:f7:c3:e8:41:
39:a0:c2:31:f6:23:d0:38:82:e7:88:d0:27:68:bc:66:28:7a:
60:72:aa:68:49:11:3e:ef:27:85:0b:98:fa:c7:de:02:14:89:
2c:35:8f:eb:42:ba:d7:e8:e9:2d:bb:cc:0b:e5:ad:7a:58:73:
80:bd:d8:67:97:24:e1:8c:78:a1:fe:10:ee:3a:13:bf:bf:43:
00:74:34:ec:b1:c3:36:e2:48:05:fc:b6:c6:f4:ea:eb:48:f9:
d0:db:42:70:89:70:38:bc:b2:6f:66:e3:cd:fc:af:b8:ab:16:
83:da:e6:ef:7d:c3:fd:33:2e:e4:5d:25:39:67:dc:6c:38:95:
6a:45:66:bc:4f:3f:b7:93:fc:2f:09:97:64:94:8c:1b:42:a7:
a3:72:2f:52:b0:f3:f8:ba:f8:b3:19:7c:bd:4c:0f:61:72:a2:
fd:5a:b7:ff:6a:27:55:20:8b:f4:07:e3:c1:18:42:c2:2b:d4:
86:2d:b0:ab:e0:e3:2d:f7:7f:c9:01:88:d0:ab:c7:b2:98:c0:
aa:df:4d:93:53:58:51:26:29:be:09:db:cd:a8:98:26:b7:f5:
10:21:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:10 2026 by rpki-client